I found a new issue on samba-3.6.5 : "User who belongs to many groups fail to SSO samba server " as: sau1@ubs1204v3:~$ smbclient -k //10.100.51.157/samba-test WARNING: The "idmap uid" option is deprecated WARNING: The "idmap gid" option is deprecated session setup failed: NT_STATUS_MORE_PROCESSING_REQUIRED did you forget to run kinit This issue does not exist on samba-3.5.11
Created attachment 7753 [details] the log of samba-3.5.11
Created attachment 7754 [details] the log of samba-3.6.5
Find another truth: on samba-3.5.11, if samba client and samba server on different machine, it still exists the issue.